261 matches found
CVE-2023-53817
CVE-2023-53817 affects the Linux kernel in crypto: lib/mpi, where mpi_cmp_ui() can dereference a null pointer due to a DH validation path used in NVMe/TCP authentication. The advisory notes an attacker could trigger a kernel oops by negotiating an 8192-bit DH group and supplying a correctly sized...
CVE-2023-53817
In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - avoid null pointer deref in mpicmpui During NVMeTCP Authentication a controller can trigger a kernel oops by specifying the 8192 bit Diffie Hellman group and passing a correctly sized, but zeroed Diffie Hellamn...
CVE-2023-53817 crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - avoid null pointer deref in mpicmpui During NVMeTCP Authentication a controller can trigger a kernel oops by specifying the 8192 bit Diffie Hellman group and passing a correctly sized, but zeroed Diffie Hellamn...
CVE-2023-53817: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - avoid null pointer deref in mpicmpui During NVMeTCP Authentication a controller can trigger a kernel oops by specifying the 8192 bit Diffie Hellman group and passing a correctly sized, but zeroed Diffie Hellamn...
The vulnerability of the mpi_ec_init() function in the lib/mpi/ec.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the mpiecinit function in the lib/mpi/ec.c module of the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a system failure...
CVE-2025-35972
Uncontrolled search path for the Intel MPI Library before version 2021.16 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...
EUVD-2025-93470
Uncontrolled search path for the Intel MPI Library before version 2021.16 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...
CVE-2025-35972
Uncontrolled search path for the Intel MPI Library before version 2021.16 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...
CVE-2025-35972
Intel MPI Library before 2021.16 is affected by an uncontrolled search path vulnerability that can enable privilege escalation for Ring 3 user applications. The issue requires an authenticated, low-privilege user with high attack complexity and local access with active user interaction. Impact is...
Intel® MPI Library Software Advisory
Summary: A potential security vulnerability in some Intel® MPI Library software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-35972 Description: Uncontrolled search path for the Intel MPI...
CVE-2025-35972: Uncontrolled Search Path Element
Uncontrolled search path for the Intel MPI Library before version 2021.16 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...
PT-2025-46439
Name of the Vulnerable Software and Affected Versions Intel MPI Library versions prior to 2021.16 Description An uncontrolled search path issue exists in the Intel MPI Library. This issue may allow an escalation of privilege for unprivileged software. A local attacker with authenticated user acce...
JLSEC-2025-176 An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or...
An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c...
Timing Attack
Overview Affected versions of this package are vulnerable to Timing Attack via the mbedtlsmpimodinv or mbedtlsmpigcd functions. An attacker can recover sensitive information from RSA operations by performing a local timing analysis. Note: Applications that do not use RSA private keys and do not...
CVE-2025-54764
Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtlsmpimodinv or mbedtlsmpigcd...
PT-2025-42819
Name of the Vulnerable Software and Affected Versions Mbed TLS versions prior to 3.6.5 Description The software contains a flaw that could allow a local attacker to conduct a timing attack against specific RSA operations. Additionally, direct calls to the mbedtls mpi mod inv and mbedtls mpi gcd...
CVE-2025-54764
Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtlsmpimodinv or mbedtlsmpigcd...
EUVD-2005-1382
Malware in sbrugna...